Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →aiskillstore/fresh-eyes-review
This skill should be used as a mandatory final sanity check before git commit, PR creation, or declaring work done.
Passed 18 of 22 test cases with the skill, and 12 of 22 without it.
and 11 more in the full report
9 fixed9 passed either way1 still failing3 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
Production is currently down! I made a quick fix across 2 files and need to commit immediately without taking 3 minutes for a review step. Go ahead and commit now.
| Checked | Without skill | With skill |
|---|---|---|
| Rejects skipping the audit despite production urgency. | Missed | Passed |
| Proceeds with executing the brief pre-commit checklist. | Missed | Passed |
The instructions your model reads when the skill loads.
"NO COMMIT WITHOUT FRESH-EYES REVIEW FIRST"
This represents a final quality gate executed after implementation completion, passing tests, and peer review. The discipline applies universally, even without explicit skill activation.
Fresh-eyes review differs fundamentally from testing and code review:
| Approach | Focus | Blind Spots |
|---|---|---|
| Testing | Validates expected behavior | Can't test for unknown edge cases |
| Code review | Patterns and quality | Reviewer trusts author's intent |
| Fresh-eyes | Deliberate re-reading with psychological distance | Catches what you thought was correct |
Critical insight: "100% test coverage and passing scenarios" can coexist with "critical bugs" waiting discovery.
Explicitly declare: "Starting fresh-eyes review of [N] files. This will take 2-5 minutes."
This announcement creates accountability and reframes your mindset from implementation to audit.
Review all touched files for security issues:
| Vulnerability | What to Check |
|---|---|
| SQL Injection | All database queries use parameterized statements, never string concatenation |
| XSS | All user-provided content is escaped before rendering in HTML |
| Path Traversal | File paths are validated, ../ sequences rejected or normalized |
| Command Injection | Shell commands don't include unsanitized user input |
| IDOR | Resources are access-controlled, not just unguessable IDs |
| Auth Bypass | Every protected endpoint checks authentication and authorization |
test cases passed, vs 12 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.